Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption? 

Answer options:

A. Encryption of data encryption keys with a master encryption key is optional.
B. Customer-provided encryption keys are always stored in OCI Vault service.
C. Encryption is enabled by default and cannot be turned off.
D. Each object in a bucket is always encrypted with the same data encryption key.

B

Reference: https://docs.cloud.oracle.com/en-us/iaas/Content/Object/Tasks/usingyourencryptionkeys.htm